Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77523E62F17211EEA5664E63775412E6.roa
File: 77523E62F17211EEA5664E63775412E6.roa (raw, json)
Hash identifier: z31oMmz8tb4/P/AbUuk1258f+hEUfQxXEAJiNrySgiU=
Subject key identifier: 0B:BA:32:3F:84:55:50:29:AC:19:5E:38:29:D3:F2:15:55:43:D0:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A932
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77523E62F17211EEA5664E63775412E6.roa
Signing time: Wed 03 Apr 2024 04:27:23 +0000
ROA not before: Wed 03 Apr 2024 04:27:19 +0000
ROA not after: Sat 04 May 2024 04:27:19 +0000
asID: 140869
IP address blocks: 154.81.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 04 May 2024 04:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43314 (0xa932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 3 04:27:19 2024 GMT
Not After : May 4 04:27:19 2024 GMT
Subject: CN=660cdaaa-28c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:af:7c:7b:8f:7a:c6:43:9a:4f:42:9e:9b:c2:
ce:30:c2:35:19:03:e1:1f:f2:ff:14:3c:a9:84:7a:
83:37:87:86:ee:9c:25:15:2e:83:95:c7:dd:57:d5:
ca:67:b9:a6:70:e8:cf:59:6b:4b:4e:15:c6:f3:5e:
aa:45:41:08:a3:55:6c:f5:ca:3b:f0:8f:46:09:a3:
dc:2d:18:1f:f9:1e:4b:eb:03:71:60:e1:a1:93:a5:
b7:a8:f6:cb:f1:26:7f:c0:f8:6a:ab:cd:76:59:58:
b8:a2:4d:a0:49:20:69:64:4a:b8:10:1d:0a:3f:d7:
a9:74:61:63:d6:2e:37:a5:3d:c8:a2:5c:c1:29:8a:
19:f0:39:c2:19:2f:12:85:da:2e:f3:cc:92:cc:d7:
d1:c4:60:eb:aa:05:19:37:0c:02:6c:8a:6f:37:c0:
99:dd:57:55:28:91:c7:5e:ba:39:68:d3:ba:ad:15:
28:39:d5:d1:55:70:ac:fa:b5:f6:b4:03:3f:97:93:
de:bd:b3:32:23:90:78:bc:33:03:f1:fa:99:0d:51:
f6:26:20:cd:b7:62:38:fb:17:2c:8a:5a:d1:3b:fd:
62:b9:07:24:ab:6a:b3:35:2c:2a:bb:42:ac:7d:9f:
eb:61:a0:33:f9:2c:41:b2:48:d5:43:90:43:f7:1d:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BA:32:3F:84:55:50:29:AC:19:5E:38:29:D3:F2:15:55:43:D0:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77523E62F17211EEA5664E63775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.36.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:e3:6b:75:c3:ae:5c:bd:60:da:dc:7d:f4:c6:2e:43:b4:5b:
77:37:cc:c5:04:02:6b:24:23:7f:7c:11:4d:61:92:90:49:27:
1d:66:e2:05:38:33:71:00:f5:32:05:1a:c6:17:0a:ef:78:f5:
7b:c5:c3:ef:d2:bc:71:7c:24:51:f4:55:39:1b:6e:6d:2f:ef:
b4:72:b9:81:60:d2:90:8e:9a:69:7a:08:b6:3c:75:d2:fe:17:
e7:ab:92:1e:e4:1a:ff:aa:a6:bc:3d:de:d1:37:7e:95:2f:ab:
e3:75:49:59:0f:30:54:9e:c3:0d:84:7d:67:6d:5c:94:87:fa:
b1:6d:79:17:7b:b0:da:96:9a:39:2c:21:c7:2f:32:5e:6a:e3:
bb:38:f2:87:b8:2c:38:19:5e:c7:56:b3:60:e5:f8:0e:d8:16:
07:de:15:9b:65:44:a6:09:4c:a5:f1:db:77:22:e4:ac:81:52:
77:0e:52:10:bc:17:6a:f3:d7:f2:17:38:9b:d2:4e:bf:9a:62:
2e:0a:c0:97:f4:8f:5a:67:fd:04:b4:db:3b:1f:a1:22:a2:b8:
31:96:a6:ba:5c:72:77:4d:da:9a:2d:40:76:5e:8b:44:24:0d:
e6:16:38:96:86:0f:14:bd:f7:51:e4:62:d4:61:cc:08:42:12:
09:06:45:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:12 2024 by rpki-client on console-ams.rpki-client.org